Malicious code in pino-cosmiconfig-eris-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93dd9d8fc57cb176b04e7b09587a7b5e36c2d4b77c0db76abb41f2fc0bf77da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-nashira-hapi-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13e1d855ebbd081de4732709aa42f352212523da47dd75c981a0026bc5281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-canopus-subscription-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b87c7c825a2db18e8c130977e889b347093d1698c32df204faa36afa5165c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-jasmine-sass-loader-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71be3c59e0dfe748e4027f1079b928a11014eb9ed0dd0db124e3b57c425b16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148023 Malicious code in soap-hyperion-juno-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbf8b288371f848df71ed44fa48d183d53ae0aee3876e71ff53088e635592f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-transport-pulsar-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd5d66b59f878e14ee4cc32f6bb2d9d17b8fac7dd4a593beaa5d64a80e21e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-farout-link-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b058b79d3d9929bb06e60f1a798f4455a9259984cede8d69b8d1b47d524165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140213 Malicious code in bulma-gatsby-gravity-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ff803168b2fe3f1d2344f342c7f9d5a4fe781a3468e065bc15a5a06b0aeafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144783 Malicious code in mdx-vortex-node-sass-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c094899bbd95d818089b04e2d7c0142a8b8c41ff80d812a232392252e31bf0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147122 Malicious code in registry-csv-corvus-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8533a9b1ca45fd27e66682a0d0a0ab2095d395ab5a7b5b0e0ec55e3c98200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142591 Malicious code in fork-juno-link-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5851779d975f0f23b872722829c51245198fc88dd1c6a17deb0d272d4ece99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139819 Malicious code in axios-blaze-electron-builder-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435766bba1d220eea1948c3caaa83c02a3226900dd278834f7fce9a081c91a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141702 Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141045 Malicious code in configstore-apollo-mira-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f886345bbcfc473d8d3b4a18ff79cbd8439b3bac331f5bdacfb2166336a495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140276 Malicious code in cache-mongodb-oberon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144047 Malicious code in jupiter-altair-sagitta-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cbf7ce2f61cd396dd92768cf8f3c8b83ebd104b8aa54aac8d1ae5356dca391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148097 Malicious code in spawn-gemini-mongoose-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538449fd0956eee408cef5ac551636c4e3e51f952b988445fc27d61f1cf38fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140593 Malicious code in chai-janus-venus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b59ac42dfd91858b96c9ebe107dc75aa2e69f0230b58a92633b3ef4287470d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142906 Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ff2d997a3921a2cfcfc49b398c173f42620dd3ec2c30e47b5b83e91b550b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...